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WHAT IS CLAIMED IS: 

1. A method for intercepting packets in a pipeline 
network processor, comprising: 

receiving an information packet from an inbound 

5 port ; 

determining an outbound port for the information 
packet ; 

determining whether the outbound port has been 
identified for intercept processing; 
10 determining whether the destination has been 

identified for intercept processing in response to the 
port being identified for intercept processing; 

making a copy of the information packet in response 
to the destination being identified for intercept 
15 processing. 



2. The method of Claim 1, further comprising: 
placing an identity of a destination into the 
information packet for subsequent determination of 
20 intercept processing. 



3. The method of Claim 1 further comprising: 
forwarding the copy of the information packet to an 

intercept receiver. 

25 

4. The method of Claim 1, further comprising: 
forwarding the information packet to the destination 

through the destination port. 



30 



5. The method of Claim 1, further comprising: 
forwarding the copy of the information packet to a 
routing processor for destination routing. 
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6. The method of Claim 1, further comprising: 
comparing the destination to a list of reference 

destinations desired for interception. 

7. The method of Claim 6, wherein the destination 
is individually compared to each reference destination 
with a match is found. 

8. The method of Claim 7, further comprising: 
forwarding the information packet to the destination 

without copying in response to the destination not 
matching any of the reference destinations. 

9. The method of Claim 1, further comprising: 
determining whether the inbound port has been 

identified for intercept processing; 

determining whether a source of the information 
packet has been identified for intercept processing in 
response to the inbound port being identified for 
intercept processing; 

making a copy of the information packet in response 
to the source being identified for intercept processing. 

10. The method of Claim 8, further comprising: 
comparing the source to a list of reference sources 

in order to determine whether the source has been 
identified for intercept processing. 
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11. A pipeline network processor implementing code 
for intercepting packets, the code comprising: 

a first set of instructions operable to receive and 
classify an information packet, the first set of 
instructions operable to determine whether an inbound 
port from which the information packet is received has 
been identified for intercept processing; 

a second set of instructions operable to determine 
an outbound port for routing of the information packet, 
the second set of instructions operable to determine 
whether the outbound port has been identified for 
intercept processing; 

a third set of instructions operable to determine 
whether the packet satisfies input access requirements, 
the third set of instructions operable to forward the 
information packet along an intercept path in response to 
the inbound port being identified for intercept 
processing, the third set of instructions operable to 
determine whether a source of the information packet has 
been identified for intercept processing upon feedback of 
the information packet on the intercept path, the third 
set of instructions operable to determine whether the 
information packet satisfies output access requirements, 
the third set of instructions operable to forward the 
information along the intercept path in response to the 
outbound port being identified for intercept processing, 
the third set of instructions operable to determine 
whether a destination of the information packet has been 
identified for intercept processing upon feedback of the 
information packet on the intercept path; 
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a fourth set of instructions operable to set up 
feedback of the information packet on the intercept path, 
the fourth set of instructions operable to save 
appropriate bytes of the information packet to permit 
5 feedback processing of the information packet on the 

intercept path; 

a fifth set of instructions operable to place an 
address of the source of the information packet into a 
compare area of the information packet, the fifth set of 
10 instructions operable to determine an address for the 

destination of the information packet, the fifth set of 
instructions operable to place the address of the 
destination into a compare area of the information 
packet ; 

15 a sixth set of instructions operable to feedback the 

information to the first set of instructions on the 
intercept path. 

12. The pipeline network processor of Claim 11, 

2 0 wherein the third set of instructions is operable to 

construct a copy of the information packet upon feedback 
of the information packet on the intercept path in 
response to either the address of the source or the 
address of the destination being identified for intercept 
25 processing. 

13. The pipeline network processor of Claim 11, 
wherein the address of the source and the address of the 
destination are compared to a configured list of 

3 0 intercept addresses in order to determine whether the 

information packet is to be intercepted. 
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14. The pipeline network processor of Claim 11, 
wherein the sixth set of instructions is operable to 
forward the information packet to the destination upon 
completion of intercept processing. 

15. The pipeline network processor of Claim 11, 
wherein the fifth set of instructions determines the 
address of the destination from a re-encapsulated Layer 2 
header associated with the information packet. 

16. A system for intercepting packets, comprising: 

a packet interface operable to receive an 
information packet from a source at an inbound port; 

a pipeline network processor operable to forward the 
information packet to a destination, the pipeline network 
processor including a plurality of processing columns 
operable to determine a destination for the information 
packet, the plurality of processing columns operable to 
determine whether the source and destination are 
identified for intercept processing, the plurality of 
processing columns operable to build a copy of the packet 
in response to either of the source or destination for 
information packet being identified for intercept 
processing; 

a route processor operable to configure the pipeline 
network processor for intercept processing. 

17. The system of Claim 16, wherein the plurality 
of processing columns are configured to compare an 
address for the source and the destination to a 
configured list of intercept addresses. 
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18. The system of Claim 16, wherein the pipeline 
network processor is operable to route the copy of the 
information packet to the route processor for forwarding 
to an intercept receiver in response to either the source 
or destination being identified for intercept processing. 

19. The system of Claim 16, wherein the pipeline 
processor is operable to forward the copy of the 
information packet to an intercept receiver in response 
to the source or destination being identified for 
intercept processing. 



20. The system of Claim 16, wherein the pipeline 
network processor forwards the information packet to the 
destination. 



21. A system for intercepting packets in a pipeline 
network processor, comprising: 

means for receiving an information packet from an 
inbound port; 

means for determining an outbound port for the 
information packet; 

means for determining whether the outbound port has 
been identified for intercept processing; 

means for determining whether the destination has 
been identified for intercept processing in response to 
the port being identified for intercept processing; 

means for making a copy of the information packet in 
response to the destination being identified for 
intercept processing. 



